CVE-2026-111845: WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
YITH WooCommerce Product Bundlesto a version that resolves this vulnerability.Fixed in 2.30.0
Event History
Frequently Asked Questions
Does an attacker need an account or user interaction to exploit this issue?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected security impact?
The CVSS metrics indicate a low integrity impact. No confidentiality or availability impact is indicated.
Which releases are identified as affected?
The issue is reported as affecting YITH WooCommerce Product Bundles through version 2.29.0. The provided data does not identify a fixed release.